CVE-2022-41796: Sony Content Transfer

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

• Sony Content Transfer: up to and including 1.3

Published 2022-10-24. Last modified 2026-06-17.